Virus Database

Casino.2330

Description Casino.2330

Casino.2330 is a memory resident very dangerous virus which starts, finds and infects .COM-files of current directory, creates file COMMAND.COM (pseudo-COMMAND.COM) and writes its body into. After this, the virus starts this file, the virus from the pseudo-COMMAND.COM stays memory resident and removes this file from disk. Then the virus infects the .COM-files from memory-resident part.
The virus detects write protected disk by the read/write operation through INT 13h with this disk. The infector that removes the READ-ONLY attribute , contains the texts: "*.COM", "C:COMMAND.COM", "COMMAND", ".COM", hooks INT 21h.
On January, April, August, 15th the virus reads into computer' memory FAT of current drive, erases this FAT from disk and presents to play in game: if virus loses it restores the FAT contents on disk, if not - the FAT is not restored. While playing this game the virus displays:

and:
BASTARD ! You`re lucky this time - but for your own sake, now
SWITCH OFF YOUR COMPUTER AND DON`T TURN IT ON TILL TOMORROW !!!
or:
No Fuckin` Chance; and I`m punishing you for trying to trace me down !
or:
HA HA !! You asshole, you`ve lost: say Bye to your Balls all

Check other viruses! Be aware! Use Antiviral Software

Jerusalem.MBR

Description Jerusalem.MBR

This is a memory resident very dangerous multipartite virus. It infects COM and EXE files (except COMMAND.COM) in the same way as the "Jerusalem" virus does. it also affects the MBR sector of the hard disk and writes itself just after the MBR.
While executing an infected file the virus infects the MBR only, and then returns to the host program. While loading from infected MBR the virus decreases the size of DOS memory, hooks INT 13h and waits for INT 21h address changing. Then the virus increases the DOS memory size and hooks INT 21h which is used for file infection.
Depending on its internal counter the virus erases the disk sectors. The virus contains the text "COMMAND.COM".

Jerusalem.Miky

Description Jerusalem.Miky

"Jerusalem" family. It's a dangerous memory resident virus which hooks INT 8, 16h, 21h and infects the .COM- and .EXE-files. It sets the drive label to 'Miky', shifts the screen and types "MIKY 786290 B livia".

Home